Shiro, Multi Factor Authentication -

-

is there way implement multi factor authentication in shiro? can give me hint on how implement this?

for more details: basic idea is, user needs login usual, using username , password, before being authenticated user needs enter one-time-token received sms.

thank you!

i solved problem on own, i'm of course open other suggestions.

i implemented own 2 - factor authentication flow:

first of changed url of login page, shiro redirects unauthenticated user own login page, leads authentication mechanism. user needs complete 2 "stages" login.

  • on first stage he/she has provide username , password, if these valid, user redirected second stage of login.
  • meanwhile, 1 time token has been generated , sent user via sms. user's authentication progress has been saved in session (which means remember, stage 1 completed successfully).
  • on stage 2 user needs enter token. if token
    • not valid or number of attempts (5) exceeded
    • expired (after 5 minutes) number of attempts correctly enter token exceeded 4 user redirected stage 1 , progress deleted. i
  • if went fine, user authenticated shiro (of course without letting him/her know)

in end user redirected page he/she requested, still allows him/her bookmark pages. of course shiro's remember-me deactivated.


Comments

Post a Comment

Popular posts from this blog

design - Custom Styling Qt Quick Controls -

-
Image
i have custom design qt quick controls. example, change background colour of tool bar, since hate default design. how can that? in qt quick controls, there limited styling available via qt quick control styles items, buttonstyle , checkboxstyle , etc. at moment, other styles require delving qt sources , messing internal details. here complete example of how 1 might modify toolbar's style. main.qml import qtquick 2.1 import qtquick.layouts 1.0 import qtquick.controls 1.0 applicationwindow { toolbar: toolbar { id: toolbar component.oncompleted: toolbar.data[0].item.children = [newrectangle]; property item _newrectangle: rectangle { // rectangle within toolbarstyle's panel // gleaned from: // http://qt.gitorious.org/qt/qtquickcontrols/source/ // c304d741a27b5822a35d1fb83f8f5e65719907ce:src/styles/base/toolbarstyle.qml id: newrectangle anchors.fill: parent...
Read more

Unable to remove the www from url on https using .htaccess -

-
i want remove www site url. ie. https://www.domainname.com.au https://domainname.com.au . i have tried various .htacces code nothing work me. here present code remove www http not work https. rewriteengine on rewritebase / rewritecond %{http_host} ^www\.(.*)$ [nc] rewriterule ^/(.*)$ http://%1/$1 [r=301,l] rewritecond %{https} off rewriterule ^(.*)$ https://domainname.com.au/$1 [r=301,l] rewriterule ^code-of-conducts/(.*)/$ code-of-conducts.php?type=$1 rewriterule ^parents/post-a-job/(.*)/edit/$ parents/post-a-job.php?action=edit&id=$1 rewriterule ^parents/post-a-job/(.*)/$ parents/post-a-job.php?job_type=$1 rewriterule ^parents/open-jobs/(.*)/delete/$ parents/open-jobs.php?action=delete&id=$1 rewriterule ^parent-profile/(.*)/$ parent-profile.php?id=$1 rewriterule ^parents/job-details/(.*)$ parents/job-details.php?applied_id=$1 rewriterule ^sitterprofile/(.*)/$ sitterprofile.php?id=$1 rewriterule ^sitter/job-board/state/(.*)/page/(.*)/$ sitter/job-board.ph...
Read more